We are seeking a hands-on technical leader for CMMC Business Analyst to Maintain and continuously improve Information Technology policies and procedures, ensuring alignment with organizational, regulatory, and customer requirements. The ideal candidate brings deep, recent experience working within CMMC environments, supporting assessment readiness, and understanding what is materially required to satisfy control expectations. This individual must be able to navigate complex technical landscapes, challenge assumptions, and enforce architectural standards with authority. 

 This role will serve as a hands-on technical leader who can translate strategy into actionable architecture decisions, guide teams through compliant solution design, and defend architectural requirements with confidence and clarity. 

The ideal candidate will be experienced in NIST800-171, CMMC, and IT documentation, and the ability to work collaboratively with IT Security and compliance stakeholders. 

KEY RESPONSIBILITIES:  

• Risk Assessment - Mapping CMMC and NIST 800-171 controls to application security capabilities 

• Develop, maintain, and enforce Controlled Unclassified Information (CUI) policies, including proper document/data markings; train and educate users on compliant handling and labeling practices. 

• Educate users on and support adherence to Security Classification Guides (SCGs), including guidance on interpreting and applying classification/handling requirements. 

• Ensure compliance with ITAR (International Traffic in Arms Regulations) requirements for data access, storage, transmission, and export-controlled technical data. 

• Develop and maintain a Technology Control Plan (TCP), including access controls, visitor controls, data segregation, and procedures supporting export-control compliance. 

• Maintain and continuously improve Information Technology policies and procedures, ensuring alignment with organizational, regulatory, and customer requirements. 

• Define and implement policies, standards, and procedures for emerging technologies (e.g., AI), including governance, acceptable use, data protection, risk management, and compliance considerations. 

REQUIRED QUALIFICATIONS: (doesn’t have to exactly follow below bullets, but provided as a guide) 

• 5+ years of experience with the CMMC Framework 

• Experience working and identifying CUI 

• Experience working with system security plans, POAM, and Technology Control Plans. 

• Act as a "technical translator" capable of bridging strategy and implementation. 

• Technical understanding of Cloud technologies, application architectures, network and identity security, and data protection and boundary segmentation. 

• U.S. Citizenship 

PREFERRED QUALIFICATIONS 

• Experience within the DOW Contractor industry 

• Previous C3PAO, assessment, or consultancy experience 

• CISSP (Certified Information Systems Security Professional) 

Pay Range by level:

Level III - $129,000 - $158,000

Level IV - $158,000 - $188,000

We are seeking an experienced IT Security Engineer to design and implement security policies and best practices. The ideal candidate will have proven track record of security roles with increasing responsibilities, and the ability to work collaboratively with various engineering, IT, and program leads to implement and maintain a strong security posture.

KEY RESPONSIBILITIES:

• Design and Implement Security Measures: Develop and enforce security policies and protocols to protect sensitive information and systems from unauthorized access and cyber threats.
• Conduct Security Audits: Regularly assess the organization's security posture through audits and vulnerability assessments to identify potential weaknesses and recommend improvements.
• Incident Response: Provide incident response to security breaches, investigate incidents, and develop strategies to mitigate future risks.
• Updates and Patching: Audit and manage patching across the enterprise.
• Security Awareness Training: Conduct training sessions for employees to promote security best practices and awareness of potential threats.
• Stay Updated on Security Trends: Keep abreast of the latest security trends, technologies, and regulatory requirements to ensure compliance and enhance security measures.
• Enforce CMMC 2.0 Regulations:  Work closely with CMMC Security Analyst and other IT staff to implement and maintain CMMC 2.0 guidelines as they relate to cyber security.

REQUIRED QUALIFICATIONS: (doesn’t have to exactly follow below bullets, but provided as a guide)

• Educational Background: A Bachelor’s degree in Computer Science, Cybersecurity, or a related field.  Or five or more years’ of work experience as a Security Engineer or related position.
• Experience: five or more years’ of work experience as a Security Engineer or related position, with a solid understanding of security methodologies and technologies.
• Technical Skills: Proficiency in security tools and technologies, including firewalls, intrusion detection systems, and encryption methods. Familiarity with programming languages such as Python or Powershell.
• OS Platforms: Proficient in Windows, Linux and Mac operating systems.
• Cloud Platforms: AWS, Azure, and Office 365
• Networking and Infrastructure:  Proficient in vlans, VPN technologies, Firewalls, and networking best practices in a DOW environment.
• Security Frameworks:  Familiarity with CMMC 2.0 and Dfars 252.204-712 and NIST 800-171.  ISO 27001, and ITAR beneficial.
• U.S. Citizenship

PREFERRED QUALIFICATIONS

• Certifications: Relevant certifications such as Certified Information Systems Security Professional (CISSP) or Certified Ethical Hacker (CEH) are highly desirable.
• Experience: 5+ years of experience in a government regulated industry or similar high security industry.

Pay Range by Level:
Level III - $129,000 - $158,000

Level IV - $158,000 - $188,000